Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 378
Reset filtersSimple Banner <= 2.10.3 - Authenticated (Admin+) Stored Cross-Site Scripting
GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
My Site Audit <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
WPFront Notification Bar <= 1.9.2 - Authenticated Stored Cross-Site Scripting
Popular Brand Icons - Simple Icons <= 2.7.7 - Authenticated Cross-Site Scripting
TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting
Youzify <= 1.0.6 - Stored Cross-Site Scripting
ProfilePress <= 3.1.7 - Authenticated Stored Cross-Site Scripting
Any Hostname <= 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Sign-up Sheets <= 1.0.13 - Stored Cross-Site Scripting
Prismatic <= 2.7 - Stored Cross-Site Scripting
Salon booking system < 6.3.1 - Stored Cross-Site Scripting
YOP Poll <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting
Vik Rent Car <= 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP LMS – Best WordPress LMS Plugin <= 1.1.5 - Cross-Site Scripting
WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Related Posts for WordPress <= 2.0.4 - Stored Cross-Site Scripting
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.